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US A Regulation 
Humber 

POLICY ASX) HtOGElMSE FOR MfiCLOSlSaB 
OF CRXPECXSRAPaiC IHFORMATIO® TO FOREIGH KATICKS 

I. PURPOSE 

1. It is the purpose of this regulation to provide general policy guidance 
on release of cryptographic information to foreign nations, and a uniform 
procedure for obtaining approval from higher authority to disclose cryptographic 
information to foreign nations. 

II. POLICY 

2. Several U. S. agencies are responsible for matters pertaining to release 
of information. The principal agencies through which USA must seek approval for 
disclosure of cryptographic information to foreign countries axe as follows : 

a. The State-Defense Military Information Control Committee (S-EKECC). 
This Committee establishes the policy of the United States governing the disclosure 
of classified military information to foreign governments. S-SMXCC is the final 
approving authority on disclosure of classified security information to foreign 
nations. Policies of S-HMICC must be adhered to when initiating and preparing 
requests for approval of release of classified cryptographic information. 

b. Joint Chiefs of Staff (J.C.S«). It is the policy of the Joint Chiefs 
of Staff that no Joint cryptographic device or publication will be made available 
for combined use without the approval of the Joint Chiefs of Staff. 

c. United States Communal cations Intelligence Board (USCIB) . The United 
States Communications Intelligence Board establishes broad policy with respect 
to the national CC&QBT effort and has certain commitments pertaining to pre- 
servation of CQMXBT sources. Release of cryptographic information which could 
have the effect of curtailing U. S. CQMXRT must be reviewed by USCXB. 

3* Exchange of technical crypto-information with the U. K. was authorised 
by the Joint Chiefs of Staff following the first US/UK Communication Security 
(COMSBC) Conference . U.S. cryptographic information forwarded to the U. K. must 
be confined to the specific items authorised for discussion at the first and 
succeeding US/UK COMSEC conferences. Cryptoprinciples reserved for exclusive 
U. S. use will not be disclosed. Further developments or extensions to improve 
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cryptoprinciplee already disclosed to the British may be disclosed provided the 
extension is a logical one to that crypt ©principle , involves no new concepts , 
and does not use cryptoprinciples logically related to cryptoprinciples which 
have not been disclosed to the British. Hew cryptoprinciples will not be 
disclosed to U.K. authorities unless the following conditions are first 
satisfied:, 

a. She cryptoprinciple has been demonstrated as being feasible for 
development . 

b. She cryptoprinciple can be used to meet an approved combined or 
HATO communication security requirement. 

c. She Chief, Office of Communication Security, certifies that the 
cryptoprinciple will not be reserved for exclusive U. S. use. 

If. In all cases where crypto-equipments are to be made available to the 
Standing Group for BAXO approval or adoption, the revelation of cryptoprinciples 
involved should be restricted to general summaries and descriptions, and should 
not include specific wiping details, drawings, etc., until or unless, the 
equipment is in production. 

5. For the purposes of this regulation, classified cryptographic information 
is divided into two classes, defined as follows: 

Class “A” 

The following types of cryptographic material and information normally 
will be assigned to Class "A" : 

a. Manual cryptographic systems for which cryptologic clearance of the 

user is not required. (Examples : One-time pads, double-transposition) . 

b. Codes (one and two part) for which cryptographic (cryptologic) 
clearance of the user is not required. (Examples: Bomber Codes, Map Coordinate 
Codes) . 

c. Authentication systems. 

d. Devices for which cryptographic clearance of the user is not required. 

(Examples: Strip cipher system, BATEX). 
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e. Instruction pertaining to use and operation of Class "A" systems. 

f . Codes and ciphers vhich do not require cryptographic clearance for 
disclosure. 

g. Codes* ciphers and cryptographic techniques which are definitely 
established as in use or as having been in use by the recipient country(a) . 

Class "B* 1 

6. The f ollo wing types of cryptographic material and information normally 
will be assigned to Class "B": 

a. Ccmauni cation security equipments, usually electro-mechanical or 
electronic in nature. 

b. Cryptoprlnciples vhich may be incorporated in such equipments. 

c. Instructions for use and operation of such equipments. 

d. Cryptoprinciples of which there is reasonable doubt the recipient 
country has knowledge. 

e. Security evaluations and cryptanalytic techniques applicable to 
solution of all Class "A" and Class n B" information and material. 

III. PROCBEORE 

7* The class into vhich cryptographic information is placed governs the 
procedure to be followed in obtaining approval for disclosure of the information, 
normally, the request for disclosure of a cryptoprinciple should contain a request 
also for release of operating instructions and other material pertinent to 
operation and maintenance of the system. Coordination within MSA must include 
both the Chief Office of Communication Security, and the Assistant Director, 
Office of Production., prior to forwarding the request for disclosure to the 
Director for approval or signature 

Class “A” 

a. Disclosure of Class "A" cryptographic information may be approved 
by the Director. A request for approval of disclosure Shall give full details 
including reasons for disclosure and benefits vhich the U. S. may expect to 
receive in return for the information disclosed, the nature of the material to 
be released, and, if pertinent, manner of reimbursement if release of material 
is involved and any increase in USA COMSEC production contingent upon the release 
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of information. Accompanying the request vill be notification to S-HCECC 
setting forth the information authorized by the Director for disclosure, 
the recipient nation or nations and the benefits expected to accrue to 
the U. S. by virtue of the disclosure. 

Class H B W 

b. In the case of Class "B" information, policies of S-SNXCC, USCXB, 
and J.C.S. oust be considered. In certain instances, prior actions by one or 
more of these agencies may constitute approval for release, or may, on the other 
hand, prohibit release. Such previous actions or decisions will be taken into 
account When preparing a request for disclosure. Information similar to that 
required for Class “A” cryptographic information will be included in the request. 

c. The following considerations shall guide forwarding of requests for 
release through appropriate channels to the agency with final authority to 
approve release: 

(1) While 5SA COMSEC functions remain under the J.C.S., a request 
for release will be forwarded first to the J.C.S. for approval. If the J.C.S. 
approves the request will be forwarded to USCIB and will indicate that J.C.S. 
approval has been obtained. 

(2) When J.C.S. approval for release is apparent through approval 
of previous actions, the request for approval will be forwarded to USCIB with a 
notation indicating J.C.S. approval and the circumstances of the approval. 

( 3 ) Upon receiving both J.C.S. and USCIB approval, the request 
will be forwarded to S-JGHICC. Alternatively, the request to USCIB may request 
USCIB to forward the request to S-XMXCC upon approval by USCIB. 

e. When it is expected that cryptographic information will be introduced 
into the Combined Cryptographic and Security Panel of the CAN-UK-US JCECs to be 
considered for adoption for Combined and HA930 coraouni cations , if action to obtain 
authority to release has not previously been initiated, such action must be 
initiated, with the foregoing procedure, at the time of introducing the subject 
into the CAU-UK-US JCBCs. 
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MEMQKAHDDM FOR TBS CHAIFMAN, CEHSA 

SUBJECT: Disclosure of Cryptographic Information 

to Foreign Rations 

The inclosed memorandum by the USA members of 
CEHSA is foruarded for consideration at the next CEHSA 
meeting. 



P. P. LEIGH, CAEEAIH, USB 
for 

BSAHEHBEHS OF CEHSA 



Incl: 
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CEHSA. 

on 

DISCIOSCSE OF CRIPTOGRAP5IC IHF03^TIOH 

TOrofosita? &&iotes 

1. There have been several cases recently In which successful completion 
of actions to improve the cryptographic security of RftSO end Combined (US-UK) 
communications have been delayed because of the necessity to obtain release 
approval from the State-Defense Military Control Coasaittee (S-SHZCC) . In some 
cases it has also been necessary to receive the approval of the Chi ted States 
Communications Intelligence Board (USCXB) and of the Joint Chiefs of Staff 
(J.C.S.) . In the latter instances, the Director, USA. has usually initiated 
the actions necessary to obtain approval. There have been occasions also, 

in which the Director, USA, has gone directly to S-SHXCC requesting authority 
to release cryptographic information as has the OCEC on other occasions. 

2. The Director USA, is now establishing a procedure within USA. to be 
followed in obtaining the various approvals necessary for disclosure of crypto- 
graphic information to foreign nations. This procedure will, if accepted by 
the agencies exercising approving authority, provide a means of materially 
shortening the time usually required to obtain approval. 

3. As a first step it is necessary to divide cryptographic information into 
two classes which are defined as follows: 

Class "A" - Cryptomaterial which is used in forward or tactical 

echelons; has cryptoprinciples which are widely known 
in foreign nations; or is of such a nature that U. S. policy 
may not require cryptographic clearance of personnel for its use. 

Class "B" • All other cryptographic information. 

4. It may be noted that much of the cryptographic information which has been 
disclosed in the past falls into Class "A". 

5 . Under the proposed procedure, the Director, USA, would authorize 
disclosure of cryptographic information defined as Class "A" information, sad 
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the Director, BSA, would endeavor to obtain approval for release of Class "B" 
cryptographic information from the three cognisant authorities . 

6. In order that items which are in Class "A" may be acted on promptly 
without first obtaining J.C.S. approval, the Director, 2XSA, proposes to forward 
the inclosed memorandum to the J.C.S. for approval. Similar requests will be 
submitted to USCXB and S-EHXCC. 

7* It is recommended that GEBSA concur in the following actions: 

a. NSA representatives on the Combined Security end Cryptographic 
Panel of the CAB-UK-U5 JCECs, prior to submitting a paper which will eventually 
require disclosure of cryptographic information to foreigx nations will: 

(1) Indicate that the information is Class "A" cryptographic 
Information and authorised fen: release by the Director, USA, or 

(2) In c lude a statement to the effect that approval for release has 
been obtained from the cognizant responsible authorities. 

(3) Cb& similar papers submitted by other agencies, NSA representatives 
on the Conibined Security and Cryptographic Panel be assigned the 
task of obtaining release approval and inform the Banal of this 
fact in a manner similar to that described above. 

b. Forwarding the inclosed memorandum by the Director, NSA, to the J.C.S. 
for consideration. 

P. P. IBXGS, CAPTAIN, USB 
for 

USA MEMBERS OF GEBSA 
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JOIST CHIEFS OF STAFF 
on 

DISCLOSURE OF CggPTOGBAEHIC ISFORMATIOgl TO Fgagagi imOBS 
References: J.C.S.' 927/^ 

1* For the continuation of secure combined US - OK communications , and to 
improve the ccnami cations security of BA9X> forces, it is necessary from time 
to time to consider a U. 8. cryptographic system, device or publication which 
might be used for this purpose. Before many of these items can be formally 
proposed for adoption by 8A fflO forces, or for use in US-UK communications (which 
often include Commcnuealth Rations not members of RATO), it is necessary that 
approval of the Joint Chiefs of Staff be obtained. This is required in accordance 
with the provisions of Joint Actions of the Armed Forces* which states that no 
Joint cryptographic device or publication will be mode available for combined 
use without approval of the Joint Chiefs of Staff. 

2. In considering the nature of many cryptographic items for which 
requirements exist in RATO and in US - UK cccamani cations , a division into two 
classes cen be made. The cryptomaterial in one of these classes can be 
characterized by three properties: 




usually for a short tine only. She necessary canmami cation security is obtained 
by issuing new editions of codes and making frequent changes of keying material 
In the case of ciphers . The communication security, therefore, is not dependent 
upon keeping the general nature of the system unknown but upon the keys which 
are used. Zt should be pointed out in this connection that, because of the 
echelon of use, capture loss of aircraft over enemy territory, etc., would 
lead to immediate compromise of the cryptoprinciple even if it were not already 
known. 

5- Use of cryptographically cleared personnel for protection of crypto- 
material of the kind mentioned in paragraph 3 above is desirable but cannot be 
considered as an absolute necessity. The cost of investigating the large number 
of individuals in low echelons for access to such material would be very great. 

The time Involved for investigations could affect seriously the availability of 
cleared personnel for communications security purposes in these echelons . 

Furthermore, the cryptcmaterial in this class is usually based upon or closely 
related to well known cryptoprinciples. Consequently, the added protection 
afforded by a cryptologic clearance is not as important for these systems as 
is the case for other more advanced eryptoprinciples . 

6. In recognition of the foregoing condition, Department of Defense 
Directive Sunher R-5210.2, dated 5 June 1952, authorizes 3SA (AFSA) to designate 
certain types of cryptomaterial as non-critieal from the security viewpoint 
and for which no cryptographic clearance is required of individuals for access to 
security information if various classifications is still required. 

7* For cryptographic information which does not fall within the category 
described in the foregoing paragraphs, the provisions of Joint Action of the 
Armed Forces would be complied with. 

8. In light of the foregoing statements, I therefore recommend that the 
Joint Chiefs of Staff: 

a. Authorize the Director, BSA, to approve release of cryptographic 
material of the following types to foreign nations, subject to national policy for 
disclosure of classified security information: 

(1) Manual cryptographic systems for which cryptologic clearance of the 
user is not required. 

(2) Codes (one- and two-part) for which, cryptologic clearance of the 
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(3) Authentication systems. 

(4) Cryptographic devices aad machines for which cryptologic 
clearance of the user is not required. 

(3) Other codes, ciphers, aad cryptographic techniques which axe 
definitely established as in use or as having been in use by 
the naticn(s) involved in disclosure. 

(6) Instructions pertaining to use of the foregoing cryptographic 
material. 

b. Direct amendment of Joint Action of the Armed Forces to conform to 
the foregoing authorization. 

9* Coordination with the Director, Communications-Electronics has been 
effected. 
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MEMORARDUM FOR THE MEMBERS OF USCIB 
SUBJECT: Disclosure of Cryptographic Information to Foreign Rations 

1. There are, at present, three agencies which may he required to 
approve release or disclosure of cryptographic information to foreign nations 
These are the Joint Chiefs of Staff, USCIB, and the State-Defense Military 
Information Control Committee (S-EMXCC) , 

2. At present the general national policy permits release of COMFIiJfeBiJAL 
cryptographic information to Australia and Hew Zealand and TUP SECRET crypto- 
graphic informatics: to the United Kingdom and Canada as necessary to permit 
implementation of communications agreements. In the case of all BATO countries, 
and of the remaining commonwealth countries, S-UHXCC policy prohibits release 
of cryptographic information except as approved by S-EWCC in each instance. 

3* The majority of the communications agreements which are being 
implemented, either through the CAN-UK-US JCECs or through the CECS of the 
Standing Group of XATO, require participation on the part of the HATD nations 
and the commonwealth countries. Furthermore, the majority of agreements 
concern the provision of tactical codes and ciphers such* as aircraft codes, 
authentication systems, and the like, all of which come within the "Class A" 
category referred to in paragraph 4 below* In order for this type of material 
to be available when needed, and to permit training to be conducted, it is 
necessary to have it distributed considerably in advance of the time when the 
countries which require it would be participating with the U.S. in actual 
combat operations. 

4. Generally speaking classified cryptographic information falls within 
one of two classes as follows: 

Class "A" 

The following types of cryptographic material and information normally 
will be assigned to Class "A": 

a. Manual cryptographic systems for which cryptologic clearance of 
the user is not required. (Examples: One-time pads, double-transposition). 

b. Codes (one and two part) for which cryptographic (cryptologic) 
clearance of the user is not required. (Examples : Bomber Codes, Map Coordinate 
Codes). 
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e. Authentication ays teas. 

d. Devices for which cryptographic clearance of the user is not 

required. (Examples: Strip cipher system, BAXEX). 

e. Instruction pertaining to use and operation of Class "A" systems. 

f . Codes and ciphers which do not require cryptographic clearance 
for disclosure. 

g. Codes, ciphers, sad cryptographic techniques which are definitely 
established as in use or as having been in use by the recipient country(s) . 

Class "B" 

She following types of cryptographic material and information normally 
will he assigned to Class "B": 

a. Communication security equipments, usually electro-mechanical or 
electronic in nature. 

b. Cryptoprinciples which may be incorporated in such equipments. 

c. Instructions for use and operation of such equipments. 

d. Cryptoprinciples of which there is reasonable doubt the recipient 
country has knowledge. 

e. Security evaluations and cryptanalytic techniques applicable to 
solution of all Class "A” and Class "B" information and material. 

5- In establishing an ISA procedure for insuring that the necessary 
clearance actions are taken, I have received from the Joint Chiefs of Staff 
authority to approve release of joint cryptographic material of the Class "A" 
type, subject to national policy for disclosure of classified security information. 

6 . The material in Class "A" consists of the type of code or cipher which 
does not require cryptographic clearance on the pert of U. S. users, contains 
no new cryptoprinciples but rather consists of cryptographic ideas generally 
known to all nations, and would cause no insecurity to U. S. communications 

if the cryptoprinciple is known to hostile nations. Furthermore, the RATO 

countries receiving such material are signatory to agreements regarding storage, 
accounting, and issue of cryptamaterial. 

7 . I, therefore, recommend, in light of the foregoing statements, that 

USCIB: authorize the Director, ESA, to approve release of cryptographic systems. 
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information, end devices to foreiga nations without reference to USCIB, 
provided that such systems, information, and devices are Class "A" matter 
as defined in paragraph 4 above. The Director, USA will keep USCIB 
informed of the items which he authorises to he released and the recipient 
nation or nations. 
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MEMORAHBUM FOR TBS CHAIRMAH, S-E9KCC 
SUBJECT: Releasing Cryptographic Information 

1. There are, at present, three agencies which may he required to approve 

* 

release or disclosure of cryptographic information to foreign nations. These 
are the Joint Chiefs of Staff, the United States Communications Intelligence 
Board, and your committee. 

2. At present the general national policy permits release of COSFUERSIAL 
cryptographic information to Australia and lew Zealand and TOP SECRET crypto- 
graphic information to the United Kingdom and Canada as necessary to permit 
implementation of communications agreements . in the case of all SATO countries, 
and of the remaining commonwealth countries, S-SMXCC policy prohibits release 
of cryptographic information except as approved by S-SMXCC in each instance. 

3* The majority of the communications agreements which are being 
Implemented, either through the CAB-UK-US JCECs or through the GECS of the 
Standing Group of RATO, require participation an the part of the RATO nations 
and the commonwealth countries. Furthermore the majority of agreements 
concern the provision of tactical codes and ciphers such as aircraft codes, 
authentication systems, and the like, all of which come within the "Class A" 
category referred to in paragraph 4 below. In order for this type of material 
to be available When needed, and to permit training to be conducted, it is 
necessary to have it distributed considerably in advance of the time when the 
countries which require it would be participating with the U.S. in actual 
combat operations. 

4. Generally speaking classified cryptographic information falls within 
one of two classes as follows: 

Class "A" 

The following types of cryptographic material and information normally 
will be assigned to Class "A”: 

a. Manual cryptographic systems for Which cryptologic clearance of the 
user is not required. (Examples : One-time pads, double-transposition). 

b. Codes (one and two part) for which cryptographic (cryptologic) 
clearance of the user is not required. (Examples : Bomber Codes, Map Coo rdinat e 
Codes). 

c. Authentication systems. 

d. Devices for which cryptographic clearance of the user is not required. 
(Examples: Strip cipher system, RATES). 
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e. Instruction pertaining to use and operation of Class "A" systems* 

f . Codes and ciphers which do not require cryptographic clearance 
for disclosure. 

g. Codes, ciphers, and cryptographic techniques which are definitely 
established as in use or as having been, in use by the recipient country(s) . 

Class "B" 



The following types of cryptographic material and information normally 
will be assigned to Class "B" : 

a. Communication security equipments, usually electro-mechanical or 
electronic in nature. 

b. Cryptoprinciples which may be incorporated in such equipments. 

c. Instructions for use and operation of such equipments. 

d. Cryptoprinciples of which there is reasonable doubt the recipient 
country has knowledge. 

e. Security evaluations and cryptanalytic techniques applicable to 
solution of all Class "A" and Class ,; B" information and material. 

5. In establishing an XSA procedure for insuring that the necessary 
clearance actions are taken, I have received from the Joint Chiefs of Staff 
authority to approve release of Joint cryptographic material of the Class "A" 
type, subject to national policy for disclosure of classified security information 

6. The material in Class "A" consists of the type of code or cipher which 
does not require cryptographic clearance on the part of U. S. users, contains 
no new cryptoprinciples but rather consists of cryptographic ideas generally 
known to all nations, and would cause no insecurity to U. S. communications 

if the cryptoprinciple is known to hostile nations. Furthermore, the 1A3X) 
countries receiving such material are signatory to agreements regarding storage, 
accounting, and issue of cryptomaterial. 

7 . Z, therefore, recommend in view of the foregoing statements that the 
State-Defense Military Information Control Committee authorize the Director, 
national Security Agency, to authorize release of cryptographic systems, 
information and devices necessary to implement communication agreements 
provided that such systems, information and devices are Class "A" material 
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as defined in paragraph 4 above* 33bte Director, 5SA, will keep the S-IMICC 
infortaed of the items which he authorizes to be released and the recipient 
nation or nations. 
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